Wyatt Dahlenburg

Developer and Hacker

[Wyatt Dahlenburg @wdahlenb]

@princechaddha Insane! I hope you and your brother are alright!

[Wyatt Dahlenburg @wdahlenb]

@rwincey Nice find! I’m sure Expressway has plenty of other bugs

[pwnmachine 👾 @princechaddha]

We at @pdiscoveryio are looking to hire a cracked security researcher.

priority on heavy CTF background & pure research experience over standard bug bounty work.

need high agency, total ownership, zero hand-holding. looking for the absolute best in the game. DMs are open

RTs/likes for reach appreciated!

[hashkitten @hash_kitten]

Seems that wp2shell PoCs are now floating around the internet, so we've published our blog post including our research methodology for finding the bug as well as a deep dive into the chain itself - https://t.co/iuU0yiYJBT

[Wyatt Dahlenburg @wdahlenb]

It’s only GPT 5.6 if it’s distilled in South Korea. Otherwise it’s just sparkling Terra!

[Wyatt Dahlenburg @wdahlenb]

Exploits != vulnerabilities. That’s okay. Let’s end the war on vulnerabilities 💪🏻

https://t.co/voEH9IFiNh

[Wyatt Dahlenburg @wdahlenb]

Happy New Year! Incredible night watching the fireworks from the Sydney Opera House

[Wyatt Dahlenburg @wdahlenb]

Merry Christmas! Celebrated my 30th birthday with an incredible visit to the Great Barrier Reef

[Wyatt Dahlenburg @wdahlenb]

Congrats! Skyvern is one of the cooler tools I’ve played around with in the past few months. Tons of opportunities with web automation and it works really well.

[Suchintan Singh @Suchintan]

1/ We just raised $2.7M to give AI "hands" to do real work. 🚀

Browser automation has been broken for 20 years. If a button moves 10 pixels, your script breaks.

Meet Skyvern: The open-source agent that fixes the "maintenance tax" of automation.

[Wyatt Dahlenburg @wdahlenb]

@DanielMiessler Agreed here. I think a lot of bug bounty hunters/platforms conflate “vulnerabilities” vs “exploits”. The actualized risk of prompt injection comes from exploitability, otherwise it’s just a feature.

[ᴅᴀɴɪᴇʟ ᴍɪᴇssʟᴇʀ 🛡️ @DanielMiessler]

My thoughts on whether or not prompt injection is a vulnerability or a delivery mechanism.

Pros and cons for both sides of the debate...

https://t.co/XkdUnGOI0v

[Wyatt Dahlenburg @wdahlenb]

Happy Thanksgiving from Down Under!

Can’t believe we’ve traveled to 20 countries this year!

[Wyatt Dahlenburg @wdahlenb]

@InsiderPhD Exploiting a vulnerability and providing details is what people write blogs about and create CVE hype over.

Asking for responsible disclosure is a good start to preventing 0days from dropping. Adding requirements to the researchers hurts this.

[Wyatt Dahlenburg @wdahlenb]

@InsiderPhD I think it’s fine to argue it’s more “ethical” or “moral” to submit a patch, but I don’t think it’s something that should be an expectation or that researchers should inherently do when they find bugs.

[Wyatt Dahlenburg @wdahlenb]

@InsiderPhD Devs (should) know their codebase best. Offsec folks are best at digging into bug classes and patches to find new vectors. Both should play to their strengths.

Collaboration is obviously the best case. Sometimes pressure from disclosure is needed to get a response or action.

[Wyatt Dahlenburg @wdahlenb]

@InsiderPhD The vuln reporter should be providing recommendations to fix the issues (not necessarily a patch). The devs may implement those recommendations or apply an entirely different solution.

Sure for trivial patches, but a discussion is better initially for more complex bugs.

[Wyatt Dahlenburg @wdahlenb]

@ez_z3r Awesome write up! I haven’t seen the bracket syntax used with SpEL before.

[ezzer @ez_z3r]

Made a writeup on a critical CVSS 10.0 vulnerability I've recently found. Check it out, maybe you'll manage to make into a full config independent RCE.
https://t.co/jQoTvtZ5Oe

[Wyatt Dahlenburg @wdahlenb]

The Threatscape was cool. My wife ended up getting spyware and I got a Trojan horse.

[Wyatt Dahlenburg @wdahlenb]

I checked out the Museum of Malware Art by @WithSecure in Helsinki, Finland over the weekend. Really neat seeing all the old school viruses!